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- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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5) n Claim(s) is/are allowed. 
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DETAILED ACTION 



1. 



Claims 1,12 and 20-21 have been cancelled. 



2. 



Claims 2,13,15, and18 have been amended. 



3. 



Claims 2-11 and 13-19 are pending. 



Claim Rejections - 35 USC § 103 



4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner In which the invention was made. 

5. Claims 2-1 1 and 13-19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Patel U.S. Patent No. 6,327,660 in view of Krawczyk, Hugo "New 
Hash Functions for Message Authentication". 

As per claim 2, Patel discloses a method for securing communications between a 
first device and a second device comprising: a processing unit /main memory (first 
device) coupled together by a chipset and a system resource comprising a storage 
device which includes a non-volatile memory (flash memory) (second device) 
communicating over a communication channel. A bus provides a pathway between the 
processing unit and/or memory, and one or more system resources in Column 3, lines 
41-67. The BIOS code within the memory can be used as a means for 
"challenge/response" protocol in Column 4, lines 1-9. The booting process as described 
in Patel is used as means for mutual authentication between the first and second 
device, in which layered software comprising a communication application, security 
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communication protocol, key manger, etc. is used to secure communications between 
the two devices in Column 4, lines 10-27. Patel discloses if first electronic device needs 
to communicate with the second device, security association and/or keying material is 
stored within the flash memory of the system resource (second device) in Column 6, 
lines 59-67, Column 7, lines 1-20. Patel also discloses IKE defined as a protocol used 
for system authentication used to generate keys using Diffie-Hellman exchange (digital 
signatures) and protecting communications between the devices in Column 7, lines 54- 
67. Patel also discloses within the processing unit (first device), an integrity check value 
is performed through the use of IPSEC AH. This protocol is designed to protect the 
integrity of information transmitted between electronic systems in Column 4, lines 29-67, 
Column 5, lines 1-21. 

However, Patel does not explicitly disclose the feature of extracting bits from a 
pseudo-random data stream for use in a matrix having M rows and N columns. 
Krawczyk teaches a method and system which uses Toeplitz matrices. 

Krawczyk discloses the claimed limitation of extracting bits randomly for use as 
coefficients of a matrix having M rows and N columns and performing operations to 
generate the integrity check value. (See pages 301-303) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
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random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 

As per claim 3, (Patel as modified by Krawczyk) discloses the claimed limitation 
of inputting keying material into a cipher engine performing operations in accordance 
with a stream cipher and producing the pseudo-random stream by the cipher engine. 
(See Krawczyk, page 302) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 

As per claim 4, (Patel as modified by Krawczyk) discloses the claimed limitation 
wherein a counter mode stream cipher in Data Encryption Standard. (See Krawczyk, 
page 304, Section 2.2, 1^* and 2"^ paragraph) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
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having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 

As per claims 5 and 9, (Pate! as modified by Krawczyk) discloses the claimed 
limitation of assigning M bits from the selected number of bits as a first column of the 
matrix and assigning M bits for each remaining column of the matrix. (See Krawczyk, 
page 307) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 

As per claims 6 and 10, (Patel as modified by Krawczyk) discloses the claimed 
limitation of performing arithmetic operations on M bits from the content of the message 
and coefficients of the first column of the matrix and performing an exclusive OR 
operation between each of the values to produce integrity check value. (See Krawcyk, 
page 304, Section 2.2, 1^^ paragraph) 
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Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 

As per claim 7, (Patel as modified by Krawczyk) discloses the claimed limitation 
wherein the arithmetic operations are bitwise multiplication operations. (See Krawcyk, 
page 304, Theorem 3, and 3^^ paragraph) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 

As per claim 8, (Patel as modified by Krawczyk) discloses the claimed limitation 
of performing arithmetic operations on the M bits from the message for a N-1 column of 
the matrix and performing exclusive OR operations between values associated with N-1 
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column of the matrix to produce N-1 bits of the integrity check value. (See Krawcyk, 
page 307, Section 3) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Paters securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 7 Introduction) 

As per claims 11 and 17,.(Patel as modified by Krawczyk) discloses the claimed 
limitation of computing the integrity check value based on bits in the message, and 
determining if the bits differ from the predetennined bits set for the integrity check value. 
(See Krawcyk, page 309) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 



Application/Control Number: 10/766,337 Page 8 

Art Unit: 2137 

As per claim 13, (Pate! as modified by Krawczyk) discloses the claimed limitation 
of computing an integrity check value for an incoming message and detemnining 
whether the incoming message is valid by comparing the computed integrity check 
value with the recovered integrity check value (See Column 5, lines 15-21, Column 6, 
lines 1-15) and decrypting the. incoming message before an integrity check is 
performed. (See Krawcyk, page 307, Section 3.1) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 

As per claims 14, 15, and 16, (Patel as modified by Krawczyk) discloses the 
claimed limitation of performing arithmetic operations on M bits from the content of the 
message and coefficients of the first column of the matrix and performing an exclusive 
OR operation between each of the values to produce integrity check value. (See 
Krawcyk, page 304,1^^ and 2"^ paragraph) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
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would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See Krawczyk, page 30 - Introduction) 

As per claim 18, (Patel as modified by Krawczyk) discloses the claimed limitation 
the first device includes a integrity check value generator to produce an integrity check 
value based on a selected group of its from a pseudo-random data stream and contents 
of the message. (See Krawczyk, page 308, Section 4 and page 309,1^* and 2"^ 
paragraph) 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See page 30 - Introduction) 

As per claim 19, (Patel as modified by Krawczyk) discloses the claimed limitation 
wherein the first device is a processor and the second device is a memory. (See Patel, 
Column 3, lines 45-47) 
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Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify Patel's securing communication method 
by combining Krawczyk's hash function for message authentication. This modification 
would have been obvious to a person having ordinary skill in the art because a person 
having ordinary skill in the art would have been motivated to extract bits from a pseudo- 
random data stream for use in a matrix having M rows and N columns by utilizing a 
Toeplitz matrix as taught in Krawcyk in order to secure communication using matrix- 
vector multiplication. (See page 30 - Introduction) 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Courtney D. Fields whose telephone number is 571- 
272-3871 . The examiner can normally be reached on Mon - Thurs. 6:00 - 4:00 pm; off 
every Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on 571-272-3865. The fax phone number 
for the organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 



Conclusion 
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